CVE-2024-12539
Elasticsearch Incorrect Authorization
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Elasticsearch Incorrect Authorization
An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.
Reserved 2024-12-11 | Published 2024-12-17 | Updated 2024-12-17 | Assigner elasticCWE-863 Incorrect Authorization
discuss.elastic.co/...h-8-16-2-8-17-0-security-update/372091
Support options
